The ASD Essential Eight is a set of practical strategies developed by the Australian Cyber Security Centre. Fortly considers practices relevant to the Essential Eight as part of its exposure work, but readiness indicators are not a formal Essential Eight maturity assessment.
The practices the ASD Essential Eight covers.
Where the Exposure Readiness Check touches Essential Eight relevant practices, it uses these statuses.
The answers suggest the practice is likely in place. Verification can confirm it.
The answers suggest this area may be missing or incomplete. Worth prioritising.
The answers do not give enough information to indicate either way.
The area was not covered by the check, or does not apply to your environment.
A readiness indicator is not a formal Essential Eight maturity assessment. Fortly does not determine an Essential Eight Maturity Level (0 to 3) from the free questionnaire.
A formal maturity position requires a separately scoped, evidence-based assessment of your environment. If that is something you need, talk to us about scope.
The free check also reflects self-reported answers. Where a finding matters, the Verified Exposure Scan can confirm it with read-only technical evidence.